@pcircle/memesh 4.4.0 → 4.5.1

package/scripts/hooks/session-summary.js

@@ -3,6 +3,22 @@
 // Session Auto-Capture — Stop hook
 // Extracts knowledge from completed Claude Code sessions
 // and stores as session-insight entities in MeMesh.
+//
+// THIS HOOK STAYS, and that was an open question rather than an assumption.
+// `dream run --from-transcripts` reads the same sessions from their raw JSONL
+// and does not depend on this hook having fired, so the obvious next step was
+// to retire the hook as redundant. Measured first, on a real graph
+// (2026-08-09, 214 active entities, ollama nomic-embed-text, L2 over the same
+// `name + observations` text the runtime embeds):
+//
+//   every transcript-mined memory -> its nearest hook-captured entity
+//     min 0.784   p25 0.821   p50 0.865   max 0.946
+//     within 0.55: 0 of 47.   within 0.70: 0 of 47.
+//
+// Nothing the transcript miner produced came within 0.78 of anything this hook
+// recorded. They are not two views of the same material: this hook records what
+// HAPPENED (files touched, commands run, commits), the miner extracts what was
+// DECIDED and what was LEARNED. Retiring either one loses a whole category.
 
 import { createRequire } from 'module';
 import { basename, join } from 'path';
@@ -11,6 +27,7 @@ import { spawn } from 'child_process';
 import os from 'os';
 import { pathToFileURL } from 'url';
 import {
+  AUTO_CAPTURE_TAG,
   captureEntity,
   decideAutoUpdateHook,
   getMemeshDirFromDbPath,
@@ -19,6 +36,8 @@ import {
   isAutoCaptureEnabled,
   openHookDb,
   readUpdateCheckCache,
+  recordHookRun,
+  stampHookRunOnly,
   resolveAutoUpdatePolicy,
   resolvePluginRoot,
   spawnAutoUpdate,
@@ -70,6 +89,7 @@ function parseTranscript(transcriptPath) {
   const bashCommands = [];
   const errorsEncountered = [];
   let toolCallCount = 0;
+  let readFailed = false;
 
   try {
     const lines = readFileSync(transcriptPath, 'utf8').split('\n').filter(l => l.trim());
@@ -133,10 +153,15 @@ function parseTranscript(transcriptPath) {
   } catch (err) {
     // The transcript file itself could not be read, which empties this
     // session's entire capture — filesEdited/errors/toolCallCount all return
-    // zero, so downstream `toolCallCount < 3` bails and no session insight,
-    // failure analysis or lesson is produced. An absent file is the normal
-    // "not written yet" case; anything else is a real fault worth a trace.
+    // zero. Left unflagged, those zeros are indistinguishable from a
+    // genuinely quiet session, and the light-session bail downstream would
+    // STAMP the heartbeat — repeated permission/I-O failures keeping doctor
+    // green while every session's capture is lost. `readFailed` is the
+    // distinct signal: capture was lost, not skipped. An absent file
+    // (ENOENT) is the vanished-transcript race, which the caller already
+    // treats as a correct nothing-to-do decision.
     if (err?.code !== 'ENOENT') {
+      readFailed = true;
       try {
         process.stderr.write(
           `[memesh session-summary] transcript ${transcriptPath} unreadable ` +
@@ -146,7 +171,7 @@ function parseTranscript(transcriptPath) {
     }
   }
 
-  return { filesEdited: [...filesEdited], bashCommands, errorsEncountered, toolCallCount };
+  return { filesEdited: [...filesEdited], bashCommands, errorsEncountered, toolCallCount, readFailed };
 }
 
 // Main: read stdin, extract insights, store in DB
@@ -176,7 +201,23 @@ process.stdin.on('end', async () => {
 
     const sessionId = inputData.session_id || 'unknown';
     const transcriptPath = inputData.transcript_path;
-    const cwd = inputData.cwd || process.cwd();
+
+    // `cwd` decides the project tag, and the project tag decides which
+    // sessions `session-start` injects and which memories `pre-edit-recall`
+    // surfaces. Falling back to `process.cwd()` — the hook process's launch
+    // directory, which is unspecified for a Stop hook — tagged the session with
+    // whatever happened to be current. Measured: a payload with no `cwd` filed
+    // the whole session under `project:memesh-llm-memory`, a project it had
+    // nothing to do with, silently. That leaks one project's file names, bash
+    // commands and error text into another project's context.
+    //
+    // `post-commit` refuses this exact case and says why: better to miss one
+    // capture than to file it under the wrong project. Same rule here.
+    if (!inputData.cwd) {
+      try { process.stderr.write(`[memesh session-summary] cwd absent in payload (keys: ${Object.keys(inputData).join(',')}); cannot resolve project, skipping capture\n`); } catch {}
+      return exit0();
+    }
+    const cwd = inputData.cwd;
     // Default-allow: when Claude Code's Stop payload omits
     // `was_in_agentic_loop` (it has been silently absent in production
     // for an unknown number of releases — symptom: zero session-insight
@@ -198,7 +239,13 @@ process.stdin.on('end', async () => {
     // but did nothing, the exact sibling of the `was_in_agentic_loop` absence
     // above. Removed; the `toolCallCount < 3` check below is the real
     // low-signal filter.
-    if (!wasAgenticLoop) return exit0();
+    // From here down the payload is well-formed and attributable — every
+    // bail is the hook deciding "nothing worth saving", which is a
+    // successful run and stamps the heartbeat. The bails ABOVE this line
+    // (empty stdin, malformed JSON, missing cwd) are schema-flip shapes: if
+    // Claude Code's payload changed under us, capture is effectively dead,
+    // and a heartbeat would mask exactly that.
+    if (!wasAgenticLoop) { stampHookRunOnly(process.env, 'session-summary'); return exit0(); }
     // Trace why we're skipping. Two failure modes:
     //   (a) transcript_path absent — schema flip, Claude Code stopped
     //       sending the field. Same bug shape as `was_in_agentic_loop`
@@ -214,14 +261,25 @@ process.stdin.on('end', async () => {
     }
     if (!existsSync(transcriptPath)) {
       try { process.stderr.write(`[memesh session-summary] transcript_path ${transcriptPath} does not exist; skipping capture\n`); } catch {}
+      // The payload named a transcript and the FILE is gone (log rotation
+      // race) — the hook itself ran fine, so this stamps. A payload that
+      // never carried the field at all (schema flip) bails above, unstamped.
+      stampHookRunOnly(process.env, 'session-summary');
       return exit0();
     }
 
     // Parse transcript
-    const { filesEdited, bashCommands, errorsEncountered, toolCallCount } = parseTranscript(transcriptPath);
+    const { filesEdited, bashCommands, errorsEncountered, toolCallCount, readFailed } = parseTranscript(transcriptPath);
+
+    // An unreadable transcript is NOT a quiet session: the capture was
+    // LOST (permissions, I/O), and a heartbeat here would keep doctor green
+    // through exactly the repeated failure it exists to expose. No stamp —
+    // parseTranscript already traced the fault to stderr.
+    if (readFailed) return exit0();
 
-    // Skip sessions with too little activity
-    if (toolCallCount < 3) return exit0();
+    // Skip sessions with too little activity — the single most common
+    // healthy exit, so it MUST stamp (see stampHookRunOnly).
+    if (toolCallCount < 3) { stampHookRunOnly(process.env, 'session-summary'); return exit0(); }
 
     // Hoisted to outer-try scope so the LLM failure-analysis block
     // below (which runs AFTER db.close()) can reference it. Earlier
@@ -232,36 +290,27 @@ process.stdin.on('end', async () => {
     const projectName = getProjectName(cwd);
 
     // Open DB via shared helper — applies SCHEMA_SQL + status migration.
-    // sqlite-vec is loaded separately because only this hook needs it
-    // (for embedding-aware recall-effectiveness tracking).
     // { fts: true } guarantees the entities_fts table exists so captureEntity()
     // can keep it in sync — session-insight memories must be FTS-recallable.
-    const handle = openHookDb(process.env, { fts: true });
-    if (!handle) {
-      // Native module unavailable (plugin-marketplace cache install with no
-      // node_modules). Skip session-capture work, but still let the
-      // auto-update tail below run — auto-update is a separate concern from
-      // session-capture, and a transient DB-availability blip should not
-      // mask a security-override patch upgrade. Throwing this sentinel
-      // routes through the existing catch, which already stderr-traces;
-      // execution then falls through to runAutoUpdateAtStop().
-      throw new Error('skip-session-capture: better-sqlite3 unavailable');
-    }
-    const { db } = handle;
-    // sqlite-vec is also a native module; same plugin-cache scenario applies
-    // (the cache tarball ships neither node_module). Resolve through a
-    // try/require here so a missing vec module degrades the same way as a
-    // missing better-sqlite3 instead of throwing into the outer catch as a
-    // bug-shaped error.
-    let sqliteVec;
-    try {
-      sqliteVec = require('sqlite-vec');
-    } catch {
-      throw new Error('skip-session-capture: sqlite-vec unavailable');
-    }
+    //
+    // sqlite-vec is NOT loaded here, and used to be. The comment said it was
+    // needed "for embedding-aware recall-effectiveness tracking" — but this
+    // hook runs exactly two statements, `PRAGMA table_info(entities)` and
+    // `SELECT id FROM entities WHERE name = ?`, and `captureEntity` in
+    // _shared.js touches no vectors either. Nothing here has ever used the
+    // extension.
+    //
+    // It was not free. sqlite-vec ships its engine as a per-platform file
+    // through optionalDependencies, and on a platform it does not publish the
+    // load threw — past the `require` guard, which never fired because the JS
+    // wrapper resolves fine and the throw happens later inside
+    // `sqliteVec.load()`. Measured with the platform binary hidden: the whole
+    // Stop capture vanished (0 entities against a control run's 1) and the
+    // user got a `Require stack:` dump on stderr. An extension nobody calls
+    // was silently costing every session on those platforms its memory.
+    const { db } = openHookDb(process.env, { fts: true });
+    let writeFailed = false;
     try {
-      sqliteVec.load(db);
-
       // Duplicate detection: if we already captured this session, bail.
       //
       // Use the FULL session_id rather than the first 8 chars: real
@@ -270,11 +319,18 @@ process.stdin.on('end', async () => {
       // share the prefix and silently skipped the second session
       // entirely. The contract is one stored capture per distinct
       // session_id, so the dedup key has to be the full id.
+      //
+      // A dedup bail is a SUCCESSFUL run — the loop executed and correctly
+      // decided there was nothing to do — so it stamps the heartbeat like
+      // the capture path below does. Only a throw leaves no stamp.
       const alreadyCaptured = db.prepare("SELECT id FROM entities WHERE name = ?").get(`session-${sessionId}-files`);
-      if (alreadyCaptured) return exit0();
+      if (alreadyCaptured) {
+        recordHookRun(db, 'session-summary');
+        return exit0();
+      }
 
       // Build and store session memories
-      const baseTags = ['source:auto-capture', `session:${sessionId}`, `project:${projectName}`];
+      const baseTags = [AUTO_CAPTURE_TAG, `session:${sessionId}`, `project:${projectName}`];
 
       // Producer for pre-edit-recall's Strategy 1 (`file:<name>` tag lookup).
       // That read path queries both the full basename and the extension-less
@@ -299,7 +355,11 @@ process.stdin.on('end', async () => {
       // only, skipping the FTS reindex the sibling hooks did — which left every
       // session-insight memory unrecallable via the FTS keyword path.
       function storeMemory(name, type, observations, tags) {
-        captureEntity(db, { name, type, observations, tags });
+        // null = the entity row could not be resolved = this write did NOT
+        // happen (captureEntity's contract). A run with a failed write must
+        // not stamp the heartbeat below — "alive" would be a lie about the
+        // exact thing the heartbeat certifies.
+        if (!captureEntity(db, { name, type, observations, tags })) writeFailed = true;
       }
 
       // Rule 1: File editing session summary
@@ -446,6 +506,14 @@ process.stdin.on('end', async () => {
         // missing-column failure is visible without crashing the hook.
         try { process.stderr.write(`[memesh session-summary] recall-effectiveness write: ${err?.message || err}\n`); } catch {}
       }
+
+      // Heartbeat AFTER capture, so the stamp certifies "the capture loop
+      // completed", not "a database handle existed". A throw above skips it,
+      // and so does a captureEntity null return (writeFailed) — a run whose
+      // write did not land must not read as alive. (The recall-effectiveness
+      // block catches its own errors — session memories were already stored
+      // by then, so the run still counts.)
+      if (!writeFailed) recordHookRun(db, 'session-summary');
     } finally {
       db.close();
     }
@@ -502,12 +570,12 @@ process.stdin.on('end', async () => {
     }
   } catch (err) {
     // Never crash Claude Code — leave a trace for debugging.
-    // Suppress the expected "skip-session-capture" sentinel (raised when
-    // better-sqlite3 is unavailable in a marketplace-cache install). All
-    // other errors are real bugs and deserve a trace.
-    if (!String(err?.message || '').startsWith('skip-session-capture:')) {
-      try { process.stderr.write(`[memesh session-summary] ${err?.message || err}\n`); } catch {}
-    }
+    //
+    // Every error is traced now. There used to be a suppression branch for a
+    // `skip-session-capture:` sentinel, thrown when sqlite-vec was missing —
+    // an extension this hook never used. The thrower is gone, so the branch
+    // could only ever hide a real error from here on.
+    try { process.stderr.write(`[memesh session-summary] ${err?.message || err}\n`); } catch {}
   }
 
   // Spawn auto-update if policy + cache permit. Runs after all session work
@@ -643,18 +711,18 @@ function writeDreamHistory(history) {
 
 /**
  * Count episodic entities for the given project over the configured
- * window. Read-only — uses the hook's _shared openHookDb helper which
- * is already on the import path.
+ * window. Only issues a SELECT, but the handle is openHookDb's ordinary
+ * read-write one (it runs the schema/migration chain) — there is no
+ * read-only variant on the hook side, and this call site must not stamp
+ * the heartbeat (recordHookRun is per-hook-exit, never per-open).
  */
 function countEpisodicEntities(projectName) {
   let handle;
   try {
     handle = openHookDb();
-    // openHookDb returns null if better-sqlite3 isn't loadable;
-    // otherwise { db, dbPath }. Don't try to call db.prepare() on
-    // the wrapper itself (the previous version did and silently
-    // skipped the gate, defeating the trigger's whole purpose).
-    if (!handle?.db) return 0;
+    // { db, dbPath } — don't call db.prepare() on the wrapper itself (an
+    // earlier version did, and silently skipped the gate, defeating the
+    // trigger's whole purpose).
     const db = handle.db;
     const since = new Date(Date.now() - DREAM_WINDOW_DAYS * 86400000).toISOString();
     const types = DREAM_EPISODIC_TYPES.map(() => '?').join(',');

package/scripts/hooks/user-prompt-intent.js

@@ -81,7 +81,7 @@ export function buildHint() {
     '1. Decide WHAT to remember from the conversation context. Be specific — pick observations',
     '   that will be useful in *future* sessions, not session-local state.',
     '',
-    '2. Decide the SCOPE (this drives namespace + tags):',
+    '2. Decide the SCOPE for a NEW memory (this drives namespace + tags):',
     '   • Machine-level / cross-project / preferences  → memesh namespace=personal',
     '   • Project-internal decision / pattern / lesson → memesh + project tag (e.g. tag:project:memesh)',
     '   • Universal / public best practice             → memesh namespace=global (rare)',
@@ -91,7 +91,8 @@ export function buildHint() {
     '   • type: one of (decision, pattern, lesson_learned, bug, process, preference, etc.)',
     '   • observations: array of specific facts / steps / rationale',
     '   • tags: relevant tags (programming language, framework, domain)',
-    '   • namespace: personal (default) | team | global',
+    '   • namespace: personal | team | global — OMIT for a memory that already exists.',
+    '     Supplying it MOVES that memory out of the scope it is in.',
     '',
     '4. Confirm to the user with: entity name + memesh ID returned by the tool.',
     '</memesh-remember-intent>',

package/skills/memesh/SKILL.md

@@ -29,9 +29,8 @@ If MeMesh is installed as a Claude Code plugin, these happen **without any actio
 
 | Hook | When | What it does |
 |------|------|-------------|
-| **SessionStart** | Every session begins | Auto-recalls top memories for current project + surfaces lesson warnings + (opt-in) agentic-orchestration banner |
+| **SessionStart** | Every session begins | Auto-recalls top memories for current project + surfaces lesson warnings |
 | **PreToolUse (Edit)** | Before editing files | Injects memories related to the file or project |
-| **PreToolUse (Bash)** | Before bash commands | (Opt-in) Nudges Claude to dispatch high-verifiability commands as background agents |
 | **UserPromptSubmit** | When you submit a prompt | Detects "remember this" intent (5 languages: en, es, fr, pt, zh-TW) and reminds Claude to use memesh |
 | **PostToolUse (Commit)** | After `git commit` | Auto-tracks commit with diff stats as a memory entity |
 | **Stop** | Session ends | Auto-captures session knowledge + runs LLM failure analysis → lessons |
@@ -104,7 +103,9 @@ Archives (soft-delete). Never permanently removes.
 ### Memories are getting verbose
 ```bash
 memesh dream run --project myapp   # propose digests for clusters of noisy memories
+memesh dream run --from-transcripts # OR: mine this project's Claude Code sessions for memory
 memesh dream list                  # review what it proposed
+memesh dream show <id>             # inspect one proposal in full before accepting
 memesh dream accept <id>           # apply one, or: memesh dream reject <id>
 ```
 Nothing changes until a proposal is accepted, and sources are archived rather

package/dist/core/skill-usage-log.d.ts

@@ -1,11 +0,0 @@
-export declare function logSkillEvent(event: string, path?: string): void;
-export interface SkillUsageSummary {
-    total_events: number;
-    events_by_name: Record<string, number>;
-    first_event?: string;
-    last_event?: string;
-    log_path: string;
-    log_bytes: number;
-}
-export declare function summariseSkillUsage(path?: string): SkillUsageSummary;
-//# sourceMappingURL=skill-usage-log.d.ts.map

package/dist/core/skill-usage-log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-usage-log.d.ts","sourceRoot":"","sources":["../../src/core/skill-usage-log.ts"],"names":[],"mappings":"AAmIA,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAqBhE;AAMD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAkCpE"}

package/dist/core/skill-usage-log.js

@@ -1,125 +0,0 @@
-import { appendFileSync, chmodSync, closeSync, existsSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, renameSync, unlinkSync, writeFileSync, } from 'fs';
-import { dirname, join } from 'path';
-import { memeshDir } from './paths.js';
-const MAX_BYTES = 10 * 1024 * 1024;
-const TRUNCATE_KEEP = 6 * 1024 * 1024;
-function defaultLogPath() {
-    return join(memeshDir(), 'skill-usage.jsonl');
-}
-function ensureParent(path) {
-    try {
-        const dir = dirname(path);
-        if (!existsSync(dir))
-            mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    catch {
-    }
-}
-function rotateIfNeeded(path) {
-    let fd = null;
-    let tmpPath = null;
-    try {
-        try {
-            fd = openSync(path, 'r');
-        }
-        catch {
-            return;
-        }
-        const { size } = fstatSync(fd);
-        if (size < MAX_BYTES * 1.2)
-            return;
-        const readLen = Math.min(TRUNCATE_KEEP, size);
-        const offset = size - readLen;
-        const buf = Buffer.alloc(readLen);
-        let totalRead = 0;
-        while (totalRead < readLen) {
-            const n = readSync(fd, buf, totalRead, readLen - totalRead, offset + totalRead);
-            if (n === 0)
-                break;
-            totalRead += n;
-        }
-        closeSync(fd);
-        fd = null;
-        const tail = buf.subarray(0, totalRead);
-        const firstNl = tail.indexOf(0x0a);
-        const aligned = firstNl >= 0 ? tail.subarray(firstNl + 1) : tail;
-        tmpPath = `${path}.rot.${process.pid}.${Date.now()}`;
-        writeFileSync(tmpPath, aligned, { mode: 0o600 });
-        renameSync(tmpPath, path);
-        tmpPath = null;
-    }
-    catch {
-    }
-    finally {
-        if (fd !== null) {
-            try {
-                closeSync(fd);
-            }
-            catch { }
-        }
-        if (tmpPath !== null) {
-            try {
-                unlinkSync(tmpPath);
-            }
-            catch { }
-        }
-    }
-}
-export function logSkillEvent(event, path) {
-    const target = path ?? defaultLogPath();
-    try {
-        ensureParent(target);
-        rotateIfNeeded(target);
-        const line = JSON.stringify({ ts: new Date().toISOString(), event }) + '\n';
-        appendFileSync(target, line);
-        try {
-            chmodSync(target, 0o600);
-        }
-        catch { }
-    }
-    catch {
-    }
-}
-export function summariseSkillUsage(path) {
-    const target = path ?? defaultLogPath();
-    const out = {
-        total_events: 0,
-        events_by_name: {},
-        log_path: target,
-        log_bytes: 0,
-    };
-    if (!existsSync(target))
-        return out;
-    let raw;
-    try {
-        const buf = readFileSync(target);
-        out.log_bytes = buf.length;
-        raw = buf.toString('utf8');
-    }
-    catch {
-        return out;
-    }
-    for (const line of raw.split('\n')) {
-        if (!line.trim())
-            continue;
-        let parsed;
-        try {
-            parsed = JSON.parse(line);
-        }
-        catch {
-            continue;
-        }
-        if (!parsed.event || typeof parsed.event !== 'string')
-            continue;
-        out.total_events += 1;
-        out.events_by_name[parsed.event] = (out.events_by_name[parsed.event] ?? 0) + 1;
-        if (parsed.ts) {
-            if (!out.first_event || parsed.ts < out.first_event)
-                out.first_event = parsed.ts;
-            if (!out.last_event || parsed.ts > out.last_event)
-                out.last_event = parsed.ts;
-        }
-    }
-    return out;
-}
-//# sourceMappingURL=skill-usage-log.js.map

package/dist/core/skill-usage-log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-usage-log.js","sourceRoot":"","sources":["../../src/core/skill-usage-log.ts"],"names":[],"mappings":"AAsCA,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtC,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAiBlC,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,SAAS,GAAG,GAAG;YAAE,OAAO;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;YACnB,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,IAAI,CAAC;QAEV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEjE,OAAO,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAc,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAc,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAa;IACxD,MAAM,MAAM,GAAG,IAAI,IAAI,cAAc,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,cAAc,CAAC,MAAM,CAAC,CAAC;QAOvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAC5E,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAK7B,IAAI,CAAC;YAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAiB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACH,CAAC;AAeD,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,MAAM,MAAM,GAAG,IAAI,IAAI,cAAc,EAAE,CAAC;IACxC,MAAM,GAAG,GAAsB;QAC7B,YAAY,EAAE,CAAC;QACf,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,CAAC;KACb,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;QAC3B,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,MAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QAChE,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QACtB,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,UAAU;gBAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/verifier.d.ts

@@ -1,40 +0,0 @@
-export interface ExternalCheck {
-    pass: boolean;
-    summary?: string;
-}
-export interface VerifyAgentWorkInput {
-    agent_id: string;
-    workdir: string;
-    base?: string;
-    claim?: {
-        expected_files?: number;
-    };
-    report?: {
-        pass: boolean;
-        typecheck?: ExternalCheck;
-        tests?: ExternalCheck;
-        lint?: ExternalCheck;
-        build?: ExternalCheck;
-        summary?: string;
-    };
-}
-export type Verdict = 'pass' | 'fail' | 'unverified';
-export interface RealityCheckResult {
-    files_changed: number;
-    expected_files: number | null;
-    match: boolean | null;
-    base: string | null;
-    verdict: Verdict;
-    pass: boolean;
-    summary: string;
-}
-export interface VerifyAgentWorkResult {
-    entity_name: string;
-    verdict: Verdict;
-    pass: boolean;
-    reality_check: RealityCheckResult;
-    external_report: VerifyAgentWorkInput['report'] | null;
-    timestamp: string;
-}
-export declare function verifyAgentWork(input: VerifyAgentWorkInput): VerifyAgentWorkResult;
-//# sourceMappingURL=verifier.d.ts.map

package/dist/core/verifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../src/core/verifier.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,aAAa,CAAC;QACrB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAmBD,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IAkBjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IAejB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,kBAAkB,CAAC;IAClC,eAAe,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;CACnB;AA8OD,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,qBAAqB,CA8DlF"}